CVE-2024-40875

Absolute Secure Access management console (before 13.52) is affected by an XSS vulnerability. Attackers with system administrator privileges can interfere with another admin’s console session. Root cause is cross-site scripting in the console; impact is high on integrity, low on availability, non...

CVE-2024-40875 Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52

There is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.52. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack...